ledge-comstart[.]zapier[.]app

PhishDestroy identifies ledge-comstart.zapier.app as an elevated-risk domain actively impersonating Ledger, a leading cryptocurrency wallet provider. This threat falls under the category of a crypto drainer, designed to trick users into entering sensitive wallet credentials or transferring funds to attacker-controlled addresses under the guise of a legitimate Ledger setup page.

This domain was flagged with an elevated risk level and confirmed as an active crypto drainer by PhishDestroy’s domain safety analysis. Key indicators include a VirusTotal detection rate of 2 out of 95 security vendors, a Let’s Encrypt SSL certificate, and resolution to IP address 64.239.109.193. The page title mimics Ledger’s official URL (Ledger.com/Start®) and includes intentional misspellings and diacritical marks (lédger) to evade automated detection. The domain is associated with Zapier’s app subdomain structure, which is commonly abused for phishing campaigns due to its trusted domain reputation.

To mitigate risk, users should never enter wallet recovery phrases, private keys, or seed phrases on any site accessed through external links. Always verify official URLs—typing ledger.com/start directly into your browser—and use two-factor authentication (2FA) on all crypto accounts. If you encounter this or similar domains, report them immediately on PhishDestroy for community-driven safety verification and blocklist updates.